| #9301 | Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | 24 | 175 | 759 | 10k+ | | | Nonce verification recommended |
| #9302 | Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform | 24 | 431 | 1,010 | 10k+ | | | Output is not escaped |
| #9303 | Hide Shipping Method For WooCommerce | 24 | 946 | 1,447 | 10k+ | | | Non-prefixed global variable |
| #9304 | Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder | 24 | 871 | 1,371 | 10k+ | | | Non-prefixed global variable |
| #9305 | WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | 24 | 5,907 | 2,136 | 10k+ | | | Text Domain Mismatch |
| #9306 | Softaculous | 24 | 115 | 50 | 10k+ | | | file system operations fread |
| #9307 | Doubly – Cross Domain Copy Paste for WordPress | 24 | 252 | 55 | 10k+ | | | Output is not escaped |
| #9308 | Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates | 24 | 522 | 135 | 10k+ | | | Output is not escaped |
| #9309 | FeedWordPress | 24 | 496 | 319 | 9k+ | | | Missing Arg Domain |
| #9310 | Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe | 24 | 634 | 652 | 9k+ | | | Exception output is not escaped |
| #9311 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | | | Non-prefixed global variable |
| #9312 | WP Contact Slider – Contact Form Slider Widget | 24 | 1,355 | 2,589 | 9k+ | | | Non-prefixed global variable |
| #9313 | Product Size Charts Plugin for WooCommerce | 24 | 1,042 | 1,422 | 9k+ | | | Non-prefixed global variable |
| #9314 | MoreConvert Wishlist for WooCommerce | 24 | 3,681 | 629 | 9k+ | | | Text Domain Mismatch |
| #9315 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #9316 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | | | Unsafe printing function |
| #9317 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #9318 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #9319 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | | Non-prefixed global variable |
| #9320 | YayCurrency – WooCommerce Multi-Currency Switcher | 24 | 373 | 623 | 8k+ | | | Text Domain Mismatch |
| #9321 | My WP Customize Admin/Frontend | 24 | 1,249 | 292 | 8k+ | | | Unsafe printing function |
| #9322 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #9323 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #9324 | Participants Database | 24 | 950 | 894 | 7k+ | | | SQL query is not prepared |
| #9325 | Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar | 24 | 968 | 2,138 | 7k+ | | | Non-prefixed global variable |
| #9326 | WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | 24 | 91 | 1,725 | 7k+ | | | Non-prefixed hook name |
| #9327 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #9328 | Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers | 24 | 480 | 1,272 | 7k+ | | | Non-prefixed function |
| #9329 | YITH WooCommerce Subscription | 24 | 439 | 1,538 | 7k+ | | | Non-prefixed global variable |
| #9330 | WP Hotel Booking | 24 | 901 | 1,532 | 7k+ | | | Non-prefixed global variable |
| #9331 | Registrations for the Events Calendar – Event Registration Plugin | 24 | 404 | 944 | 7k+ | | | Non-prefixed global variable |
| #9332 | Team Members – Multi Language Supported Team Plugin | 24 | 2,081 | 11,206 | 7k+ | | | Non-prefixed global variable |
| #9333 | Extra Fees for WooCommerce | 24 | 1,113 | 1,569 | 7k+ | | | Non-prefixed global variable |
| #9334 | My Agile Privacy® – CMP, Cookie Consent & Privacy Tools | 24 | 1,170 | 674 | 7k+ | | | Text Domain Mismatch |
| #9335 | Easy Modal | 24 | 564 | 299 | 7k+ | | | Unsafe printing function |
| #9336 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,234 | 1,464 | 7k+ | | | Output is not escaped |
| #9337 | Democracy Poll | 24 | 387 | 436 | 7k+ | | | Short PHP open tag found |
| #9338 | Product Attachment for WooCommerce | 24 | 1,233 | 1,777 | 7k+ | | | Non-prefixed global variable |
| #9339 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | | | Non-prefixed global variable |
| #9340 | Social Media Auto Publish | 24 | 1,468 | 713 | 6k+ | | | Unsafe printing function |
| #9341 | Contact Form by Supsystic | 24 | 1,913 | 633 | 6k+ | | | Non Singular String Literal Domain |
| #9342 | Awesome Support – WordPress HelpDesk & Support Plugin | 24 | 225 | 1,239 | 6k+ | | | Non-prefixed global variable |
| #9343 | NEX-Forms – Ultimate Forms Plugin for WordPress | 24 | 2,008 | 1,195 | 6k+ | | | Text Domain Mismatch |
| #9344 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | | | Non-prefixed global variable |
| #9345 | Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | 24 | 363 | 1,130 | 6k+ | | | Direct Query |
| #9346 | Sokol: Smart WooCommerce Search | 24 | 599 | 1,551 | 6k+ | | | Non-prefixed global variable |
| #9347 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #9348 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | | | Text Domain Mismatch |
| #9349 | Ultimate Product Catalog | 24 | 554 | 525 | 5k+ | | | Unsafe printing function |
| #9350 | ProfileGrid – User Profiles, Groups and Communities | 24 | 484 | 2,461 | 5k+ | | | Non-prefixed global variable |